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Abstract. Chaotic functions are characterized by sensitivity to initial 
conditions, transitivity, and regularity. Providing new functions with 
such properties is a real challenge. This work shows that one can associate 
with any Boolean network a continuous function, whose discrete-time it- 
erations are chaotic if and only if the iteration graph of the Boolean 
network is strongly connected. Then, sufficient conditions for this strong 
connectivity are expressed on the interaction graph of this network, lead- 
ing to a constructive method of chaotic function computation. The whole 
approach is evaluated in the chaos-based pseudo-random number gener- 
ation context. 
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1 Introduction 

Chaos has attracted a lot of attention in various domains of science and en- 
gineering, e.g., hash function [?], steganography [?], pseudo random number 
generation [?]. All these applications capitalize fundamental properties of the 
chaotic maps [?], namely: sensitive dependence on initial conditions, transitiv- 
ity, and density of periodic points. A system is sensitive to initial conditions 
if any point contains, in any neighborhood, another point with a completely 
different future trajectory. Topological transitivity is established when, for any 
element, any neighborhood of its future evolution eventually overlaps with any 
other open set. On the contrary, a dense set of periodic points is an element of 
regularity that a chaotic dynamical system has to exhibit. 

Chaotic discrete-time dynamical systems are iterative processes defined by 
a chaotic map / from a domain E to itself. Starting from any configurations 
X £ E, the system produces the sequence x, f{x),p{x),f^{x), . . . , where f^{x) 
is the fc-th iterate of / at x. Works referenced above are instances of that scheme: 
they iterate tent or logistic maps known to be chaotic on M. 



As far as we know, no result so far states that the chaotic properties of a 
function that has been theoretically proven on M remain valid on the floating- 
point numbers, which is the implementation domain. Thus, to avoid the loss of 
chaos this work presents an alternative: to construct, from Boolean networks 
/ : B" — > B", continuous fonctions G/ defined on the domain [l;n]^ x B", 
where [1; n] is the interval of integers {1, 2, . . . , n} and B is the Boolean domain 
{0,1}. Due to the discrete nature of /, theoretical results obtained on Gj are 
preserved in implementation 

Furthermore, instead of finding an example of such maps and to prove the 
chaoticity of their discrete-time iterations, we tackle the problem of character- 
izing all the maps with chaotic iterations according to Devaney's chaos defi- 
nition [?]. This is the first contribution. This characterization is expressed on 
the asynchronous iteration graph of the Boolean map /, which contains 2" ver- 
tices. To extend the applicability of this characterization, sufficient conditions 
that ensure this chaoticity are expressed on the interaction graph of /, which 
only contains n vertices. This is the second contribution. Starting thus with 
an interaction graph with required properties, all the maps resulting from a 
Boolean network constructed on this graph have chaotic iterations. Eventually, 
the approach is applied on a pseudo random number generation (PRNG). Uni- 
form distribution of the output, which is a necessary condition for PRNGs is 
then addressed. Functions with such property are thus characterized again on 
the asynchronous iteration graph. This is the third contribution. The relevance 
of the approach and the application to pseudo random number generation are 
evaluated thanks to a classical test suite. 

The rest of the paper is organized as follows. Section [5] recalls discrete-time 
Boolean dynamical systems. Their chaoticity is characterized in Sect. [3l Suffi- 
cient conditions to obtain chaoticity are presented in Sect. |4l The application 
to pseudo random number generation is formalized, maps with uniform output 
are characterized, and PRNGs are evaluated in Sect. [5l The paper ends with a 
conclusion section where intended future work is presented. 

2 Preliminaries 

Let n be a positive integer. A Boolean network is a discrete dynamical system 
defined from a Boolean map 

/ : B" ^ B", x = . . . , a;„) ^ f{x) = {h{x), f„{x)), 

and an iteration scheme {e.g., parallel, sequential, asynchronous...). For in- 
stance, with the parallel iteration scheme, given an initial configuration x° G B", 
the dynamics of the system are described by the recurrence a;*"*"^ = /(a;*). The re- 
tained scheme only modifies one element at each iteration and is further referred 
by asynchronous. In other words, at the i*'' iteration, only the Sj— th component 
is "iterated", where s = (st)te]N ^ sequence of indices taken in called 
"strategy". Formally, let : p;n] x B" to B" be defined by 

Ff{i,x) = (Xl, . . . ,Xi-l, fi{x),Xi+l, . . . ,Xn)- 



With the asynchronous iteration scheme, given an initial configuration g B" 
and a strategy s S the dynamics of the network are described by the 

recurrence 

x'+'=Ffisux'). (1) 
Let Gf he the map from |1; n]^ x B" to itself defined by 

Gf{s,x) = {a{s),Ff{so,x)), 

where \ft G N,a{s)t = St+i- The parallel iteration of G/ from an initial point 
= (s, a;°) describes the "same dynamics" as the asynchronous iteration of / 

induced by and the strategy s (this is why Gf has been introduced). 

Consider the space X = x B". The distance d between two points 

X = (s, x) and X' ~ (s', x') in X is defined by 



d{X,X') ^ dHix,x') + ds{s,s'), where < 



dH{x,x') = ^ |Xj - x-| 
i=i 

tGN 



Thus, ld{X,X')\ = dH{x,x') is the Hamming distance between x and x' , and 
d{X,X') — ld{X,X')\ — ds{s,s') measures the differences between s and s' . 
More precisely, this fioating part is less than 10"'^ if and only if the first k terms 
of the two strategies are equal. Moreover, if the fc*'' digit is nonzero, then Sk ^ s'^. 

Let / be any map from B" to itself, and -> : B" — > B" defined by ^[x) = 
(aJT, . . . Considering this distance d on A", it has already been proven that 

[?]: 

— G/ is continuous, 

— the parallel iteration of G^ is regular (periodic points of G^ are dense in X), 

— G-, is topologically transitive (for all X,Y G X , and for all open balls Bx 
and By centered in X and Y respectively, there exist X' e Bx and i G IN 
such that G*_(X') € By), 

— G-, has sensitive dependence on initial conditions (there exists S > such 
that for any X G X and any open ball Bx, there exist X' 6 Bx and tGN 
such that d{Gi{X),GiiX')) > 5). 

Particularly, G^ is chaotic, according to the Devaney's definition recalled below: 

Definition 1 (Devaney [?]). A continuous map f on a metric space {X,d) is 
chaotic if it is regular, sensitive, and topologically transitive. 

In other words, quoting Devaney in [?], a chaotic dynamical system "is un- 
predictable because of the sensitive dependence on initial conditions. It cannot 
be broken down or simplified into two subsystems which do not interact because 
of topological transitivity. And in the midst of this random behavior, we never- 
theless have an element of regularity" . Let us finally remark that the definition 
above is redundant: Banks et al. have proven that sensitivity is indeed implied 
by regularity and transitivity [?]. 



3 Characterization of Chaotic Discrete-Time Dynamical 
Systems 



In this section, we give a characterization of Boolean networks / making the iter- 
ations of any induced map G/ chaotic. This is achieved by estabhshing inclusion 
relations between the transitive, regular, and chaotic sets defined below: 

- r = {/ : B" ^ B"/G/ is transitive}, 

- 7^ = {/ : B" ^ B"/G/ is regular}, 

- C = {/ : B" ^ B'7G/ is chaotic (Devaney)}. 

Let / be a map from B" to itself. The asynchronous iteration graph associated 
with / is the directed graph r{f) defined by: the set of vertices is B"; for all 
X g B" and i £ the graph r{f) contains an arc from x to Ff{i,x). The 

relation between r(f) and G/ is clear: there exists a path from x to x' in r(f) 
if and only if there exists a strategy s such that the parallel iteration of G/ from 
the initial point {s,x) reaches the point x' . Finally, in what follows the term 
iteration graph is a shortcut for asynchronous iteration graph. 

We can thus characterize T: 

Proposition 1. G/ is transitive if and only if r{f) is strongly connected. 

Proof. <;= Suppose that r{f) is strongly connected. Let {s,x) and {s',x') be 
two points of X, and let e > 0. We will define a strategy s such that the distance 
between {s,x) and {s,x) is less than e, and such that the parallel iterations of 
Gf from {s,x) reaches the point {s\x'). 

Let ti ~ [— logio(£)J, ^" be the configuration of B" that we obtain 

from {s,x) after ti iterations of Gf. Since r{f) is strongly connected, there 
exists a strategy s" and ^2 G N such that, x' is reached from {s",x") after t2 
iterations of G/ . 

Now, consider the strategy s = {sq, . . . , st^-i, Sq, . . . , s['^_i, s'q, s'l, s'2, s'^ . . .). 
It is clear that (s', x') is reached from (s, x) after <i+t2 iterations of G/, and since 
St = st for t < ti,hy the choice of ti, we have d((s, a;), (s, x)) < e. Consequently, 
G/ is transitive. 

=> If r{f) is not strongly connected, then there exist two configurations x 
and x' such that r{f) has no path from x to x'. Let s and s' be two strategies, 
and let < £ < 1. Then, for all (s", x") such that d{{s" , x"), (s, x)) < e, we have 
x" = X, so that iteration of G/ from {s",x") only reaches points in X that are 
at a greater distance than one with (s', x'). So G/ is not transitive. 

We now prove that: 

Proposition 2. T C TZ. 

Proof Let / : B" B" such that G/ is transitive (/ is in T). Let (s, a;) £ A" 
and e > 0. To prove that / is in TZ, it is sufficient to prove that there exists a 
strategy s such that the distance between {s,x) and {s,x) is less than e, and 
such that (s, x) is a periodic point. 



Let ti = [— log2Q(e)J, and let x' be the configuration that wc obtain from 
{s,x) after ti iterations of Gf. According to the previous proposition, r{f) is 
strongly connected. Thus, there exists a strategy s' and ^2 £ N such that x is 
reached from {s',x') after <2 iterations oi Gf. 

Consider the strategy s that alternates the first ti terms of s and the first t2 
terms of s': s = {sq, Sti_i, Sg, . . . , s[^_^,So, Sti_i, Sg, . . . , s^^_^,so, ...). 
It is clear that {s,x) is obtained from {s,x) after ti + t2 iterations of Gf. So 
(s, x) is a periodic point. Since st — st for t < ti, by the choice of ti, wc have 
d{{s,x), {s,x)) < e. 

Remark 1. Inclusion of proposition [5] is strict, due to the identity map (which is 
regular, but not transitive). 

We can thus conclude that C = TZ D T = T, which leads to the following 
characterization: 

Theorem 1. Let f : B" — ;> B". Gf is chaotic (according to Devaney) if and 
only if r{f) is .strongly connected. 

4 Generating Strongly Connected Iteration Graph 

The previous section has shown the interest of strongly connected iteration 
graphs. This section presents two approaches to generate functions with such 
property. The first is algorithmic (Sect. I4.1|) whereas the second gives a suffi- 
cient condition on the interaction graph of the Boolean map / to get a strongly 
connected iteration graph (Sect. W^ . 

4.1 Algorithmic Generation of Strongly Connected Graphs 

This section presents a first solution to compute a map / with a strongly con- 
nected graph of iterations r{f). It is based on a generate and test approach. 

We first consider the negation function -i whose iteration graph r{-^) is obvi- 
ously strongly connected. Given a graph F, initialized with i^(~i), the algorithm 
iteratively does the two following stages: 

1 . randomly select an edge of the current iteration graph F and 

2. check whether the current iteration graph without that edge remains strongly 
connected (by a Tarjan algorithm [?], for instance). In the positive case the 
edge is removed from F, 

until a rate r of removed edges is greater than a threshold given by the user. If 
r is close to 0% {i.e., few edges are removed), there should remain about n x 2" 
edges. In the opposite case, if r is close to 100%, there are about 2" edges left. 
In all cases, this step returns the last graph F that is strongly connected. It is 
now then obvious to return the function / whose iteration graph is F. 

Even if this algorithm always returns functions with stroncly connected com- 
ponent (see) iteration graph, it suffers from iteratively verifying connexity on 



the whole iteration graph, i.e., on a graph with 2" vertices. Next section tackles 
this problem: it presents sufBcient conditions on a graph reduced to n elements 
that allow to obtain SCC iteration graph. 

4.2 Sufficient Conditions to Strongly Connected Graph 

We are looking for maps / such that interactions between Xi and fj make its 
iteration graph r{f) strongly connected. We first need additional notations and 
definitions. For x G B" and i S |1; n], we denote by x^ the configuration that we 
obtain be switching the z— th component of x, that is, x^ = (cci, . . . ,a^r, . • . ,a;„). 
Information interactions between the components of the system are obtained 
from the discrete Jacobian matrix /' of /, which is defined as being the map 
which associates to each configuration x G B", the n x n matrix 

fix) ^ f,,ix) = ^-(^^.)-/'(^) e 

Xj Xj 

More precisely, interactions are represented under the form of a signed di- 
rected graph G(/) defined by: the set of vertices is and there exists an 
arc from j to i of sign s G {—1, 1}, denoted {j, s, i), if fij{x) = s for at least one 
X € B" . Note that the presence of both a positive and a negative arc from one 
vertex to another is allowed. 

Let P be a sequence of arcs of G(/) of the form 

{h, 81,12), (i2, 52,43), ••■ , (V, Sr,ir+l)- 

Then, P is said to be a path of G{f) of length r and of sign Ul^^Si, and v+i is 
said to be reachable from ii. P is a circuit if ir+i = ii and if the vertices ii,. . . ir 
are pairwise distinct. A vertex i of G{f) has a positive (resp. negative) loop, if 
G{f) has a positive (resp. negative) arc from i to itself. 

Let a G B. We denote by /" the map from B"~^ to itself defined for any 
X G B"-i by 

f^ix) = ifiix, a),..., fn-i{x, a)). 

We denote by P(/)" the subgraph of P(/) induced by the subset B""-'^ x {a} 
of B". Let us give and prove the following technical lemma: 

Lemma 1. G{f'^) is a subgraph ofG{f): every arc of G{f°') is an arc ofG{f). 
Furthermore, if G{f) has no arc from n to a vertex i 7^ n, then G{f°') ~ G{f)\n: 
one obtains G{f°') from G{f) by removing vertex n as well as all the arcs with 
n as initial or final vertex. 

Proof. Suppose that G{f") has an arc from j to i of sign s. By definition, there 
exists X G B"~^ such that f"j{x) = s, and since it is clear that f^{x) = fij{x, a), 
we deduce that G{f) has an arc from j to i of sign s. This proves the first 
assertion. To demonstrate the second assertion, it is sufficient to prove that if 
G{f) has an arc from i to j of sign s, with i,j ^ n, then G{f°') also contains this 



arc. So suppose that G(/) has an arc from i to j of sign s, with i,j ^ n. Then, 
there exists x G B"^-^ and /3 e B such that fij{x,(i) = s. If fij{x,(3) ^ fij{x,a), 
then fi depends on the n— th component, in contradiction with the assumptions. 
So fij{x,a) = s. It is then clear that f"j{x) = s, that is, G{f") has an arc from 
j to i of sign s. 

Lemma 2. r{f°') and r{f)" are isomorphic. 

Proof. Let h be the bijection from B"^^ to B"^^ x {a} defined by h{x) = {x, a) 
for all X S B""-'^. It is easy to see that h is an isomorphism between r{f") and 
r{f)" that is: r{f") has an arc from a; to y if and only if r{f)" has an arc from 
h{x) to h{y). 

Theorem 2. Let f be a map from B" to itself such that: 

1. G{f) has no cycle of length at least two; 

2. every vertex of G{f) with a positive loop has also a negative loop; 

3. every vertex of G{f) is reachable from a vertex with a negative loop. 

Then, r{f) is strongly connected. 

Proof. By induction on n. Let / be a map from B" to itself satisfying the 
conditions of the statement. If n = 1 the result is obvious: according to the third 
point of the statement, G{f) has a negative loop; so f{x) — x and r{f) is a 
cycle of length two. Assume that n > 1 and that the theorem is valid for maps 
from B""-'^ to itself. According to the first point of the statement, G{f) contains 
at least one vertex i such that G(/) has no arc from i to a vertex j ^ i. Without 
loss of generality, assume that n is such a vertex. Then, according to Lemma [1] 
/° and f^ satisfy the conditions of the statement. So, by induction hypothesis, 
r{f°) and r{f^) are strongly connected. So, according to LemmadJ r{f)° and 
r{fy are strongly connected. To prove that r{f) is strongly connected, it is 
sufficient to prove that r{f) contains an arc x ^ y with a;„ = < y„ and an 
arc X ^ y with a;„ = 1 > ?/„. In other words, it is sufficient to prove that: 

Va e B, 3xe B", xn = a ^ fn{x). (*) 

Assume first that n has a negative loop. Then, by the definition of G{f), 
there exists x £ B" such that fnn{x} < 0. Consequently, if a;„ = 0, we have 
fn{x) > so = 7^ fn{x) and x^ = 1 /„(x"); and if x„ = 1, we 

have fn{x) < /„(x"), so x„ = 1 7^ fn{x) and xj^ = 7^ /„(x"). In both cases, 
the condition (*) holds. 

Now, assume that n has no negative loop. According to the second point of 
the statement, n has no loop, i.e., the value of fn{x) does not depend on the value 
of Xn. According to the third point of the statement, n is not of in-degree zero in 
G{f), i.e., fn is not a constant. Consequently, there exists x,y G B" such that 
fn{x) = 1 and fn{y) = 0. Let x' ^ (zi, . . . , a;„_i, 0) and y' = (yi, . . . , y„_i, 1). 
Since the value of /„(x) (resp. fn{y)) does not depend on the value of Xn (resp. 
y„), we have /„(a;') = /„(x) = 1 7^ x^, (resp. f„{y') = fn{y) = y'J. So the 
condition (*) holds, and the theorem is proven. 



Input: a function /, an iteration number 6, an initial configuration x^' (n bits) 
Output: a configuration x {n bits) 

a; ^ x"; 

k ^ b + XORshift{b + I); 
for i = 0, . . . , fc — 1 do 

s <" XORshift{n)\ 

X Ff{s, x); 
end 

return i; 

Algorithm 1: PRNG with chaotic functions 

5 Application to Pseudo Random Number Generator 

This section presents a direct apphcation of the theory developed above. 

5.1 Boolean and Chaos based PRNG 

We have proposed in [?] a new family of generators that receives two PRNGs 
as inputs. These two generators are mixed with chaotic iterations, leading thus 
to a new PRNG that improves the statistical properties of each generator taken 
alone. Furthermore, our generator possesses various chaos properties that none of 
the generators used as input present. This former family of PRNGs was reduced 
to chaotic iterations of the negation function, i.e., reduced to G-,. However, it 
is possible to use any function / such that G/ is chaotic (s.t. the graph r{f) is 
strongly connected). 



Input: the internal configuration z (a 32-bit word) 

Output: y (a 32-bit word) 

z ^ z e (z < 13); 

z ^ z ® (z > 17); 

2 ^ z ® (z < 5); 

y ^ z\ 

return y\ 

Algorithm 2: An arbitrary round of XORshift algorithm 



This generator is synthesized in Algorithm[TJ It takes as input: a function /; 
an integer b, ensuring that the number of executed iterations is at least b and 
at most 2b + 1; and an initial configuration x'^ . It returns the new generated 
configuration x. Internally, it embeds two XORshift (k) PRNGs [?] that returns 
integers uniformly distributed into XORshift is a category of very fast 

PRNGs designed by George Marsaglia, which repeatedly uses the transform of 
exclusive or (XOR, ©) on a number with a bit shifted version of it. This PRNG, 
which has a period of 2^2 - 1 = 4.29 X 10^, is summed up in Algorithm [21 It is 
used in our PRNG to compute the strategy length and the strategy elements. 



/I 1 0\ 
10 1 
10 1 
t \0 110/ 

(e) G{h). (f) Mh, 

(a) rig). (d) r{h). 

Fig. 1: Graphs of candidate functions with n = 2 

We are then left to instantiate the function / in Algorithm [1] according to 
approaches detailed in Sect. IH Next section shows how the uniformity of distri- 
bution has been taken into account. 

5.2 Uniform Distribution of the Output 

Let us firstly recall that a stochastic matrix is a square matrix where all entries 
are nonnegative and all rows sum to 1. A double stochastic matrix is a stochastic 
matrix where all columns sum to 1. Finally, a stochastic matrix M of size n is 
regular if 3k G IN*, Vi, 6 |1; n], A/^j > 0. The following theorem is well-known: 

Theorem 3. // M is a regular stochastic matrix, then M has an unique sta- 
tionary probability vector ir. Moreover, i/tt" is any initial probability vector and 
tt'^"'"^ = TT^ .M for k = 0, 1, . . . then the Markov chain converges to n as k 
tends to infinity. 

Let us explain on a small example with 2 elements that the application of 
such a theorem allows to verify whether the output is uniformly distributed or 
not. Let then g and h be the two functions from to itself defined in Fig. [T] 
and whose iteration graphs are strongly connected. As the XORshift PRNG is 
uniformly distributed, the strategy is uniform on |1,2]], and each edge of r{g) 
and of r(h) has a probability 1/2 to be traversed. In other words, r{g) is the 
oriented graph of a Markov chain. It is thus easy to verify that the transition 
matrix of such a process is Mg ~ ^Mg, where Mg is the adjacency matrix given 
in Fig. [Tel ^nd similarly for Mh. 

Both Mg and Mh are (stochastic and) regular since no element is null either 
in M^ or in M^. Furthermore, the probability vectors ng = (0.4,0.1,0.3,0.2) 
and TTh = (0.25, 0.25, 0.25, 0.25) verify iTgMg = -Kg and nhMh = tt/j. Thus, due to 
Theorem[3l for any initial probability vector 7r°, we have limfc_>oo 7r°M^ = iTg and 
limfe_i.oo T^^^Ih — '^h- So the Markov process associated to h tends to the uniform 
distribution whereas the one associated to g does not. It induces that g shouldn't 
be iterated in a PRNG. On the contrary, h can be embedded into the PRNG 
Algorithm [1] provided the number b of iterations between two successive values 
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is sufficiently large so that the Markov process becomes close to the uniform 
distribution. 

Let us first prove the following technical lemma. 

Lemma 3. Let f : B" B", r{f) its iteration graph, M the adjacency matrix 
of r{f ), and M a n x n matrix defined by Af^ = ^Mij if i ^ j and Ma = 

n 

1 — — ^ Mij otherwise. Then M is a regular stochastic matrix iff r{f) is 
strongly connected. 

Proof. Notice first that M is a stochastic matrix by construction. If there exists 
k s.t. M-J- > for any i,j e |1; 2"|, the inequality Af^^- > is thus established. 
Since M^j is the number of paths from i to j of length k in r{f) and since such 
a number is positive, thus r(f) is strongly connected. 

Conversely, if r{f) is SCC, then for all vertices i and j, a path can be 
found to reach j from i in at most 2" steps. There exists thus kij G |1,2"]] 
s.t. Mif^ > 0. As all the multiples I x kij of fc.y are such that m\^^''' > 0, we 
can conclude that, if k is the least common multiple of {hj/ij G Il,2"|} thus 
Vz, j e |1,2"],M^- > 0. So, M and thus M are regular. 

With such a material, wc can formulate and prove the following theorem. 

Theorem 4. Let f : B" — B", r{f) its iteration graph, M its adjacency matrix 
and M a n x n matrix defined as in the previous lemma. If r{f) is SCC then 
the output of the PRNC detailed in Algorithm]^ follows a law that tends to the 
uniform distribution if and only if M is a double stochastic matrix. 

Proof. M is a regular stochastic matrix (Lemma[3]) that has a unique stationary 
probability vector (Theorem Let Trbe (^,...,^). We have ttM = tt iff the 
sum of values of each column of M is one, i.e., iff M is double stochastic. 

5.3 Experiments 

Let us consider the interaction graph G(/) given in Fig.[2al It verifies Theorem[5J 
all the functions / whose interaction graph is G(/) have then a strongly con- 
nected iteration graph r{f). Practically, a simple constraint solving has found 
520 non isomorphic functions and only 16 of them have a double stochastic ma- 
trix. Figure [2bl synthesizes them by defining the images of 0,1,2,. .. ,14,15. Let 
Cj be the unit vector in the canonical basis, the third column gives 

max {min{fc I fc £ N, I WiM^ — ttI L < 10^''||where tt, is l/n.eo, 

jell,2"l' ' M V / 112 J I 

that is the smallest iteration number that is sufficient to obtain a deviation less 
than 10~^ from the uniform distribution. Such a number is the parameter h in 
Algorithm [TJ 

Quality of produced random sequences have been evaluated with the NIST 
Statistical Test Suite SP 800-22 [?]. For all 15 tests of this battery, the signifi- 
cance level a is set to 1%: a p-value which is greater than 0.01 is equivalent that 



Name 


Function image 


b 


J^l 


14, 15, 12, 13, 10, 11, 8, 9, 6, 7, 4, 5, 2, 3, 1, 


206 


Ti 


14, 15, 12, 13, 10, 11, 8, 9, 6, 7, 5, 4, 3, 2, 0, 1 


94 


T:i 


14, 15, 12, 13, 10, 11, 8, 9, 6, 7, 5, 4, 3, 2, 1, 


69 


Ti 


14, 15, 12, 13, 10, 11, 9, 8, 6, 7, 5, 4, 3, 2, 0, 1 


56 




14, 15, 12, 13, 10, 11, 9, 8, 6, 7, 5, 4, 3, 2, 1, 


48 


J'e 


14, 15, 12, 13, 10, 11, 9, 8, 7, 6, 4, 5, 2, 3, 0, 1 


86 


^7 


14, 15, 12, 13, 10, 11, 9, 8, 7, 6, 4, 5, 2, 3, 1, 


58 


^8 


14, 15, 12, 13, 10, 11, 9, 8, 7, 6, 4, 5, 3, 2, 1, 


46 




14, 15, 12, 13, 10, 11, 9, 8, 7, 6, 5, 4, 3, 2, 0, 1 


42 


^ 10 


14, 15, 12, 13, 10, 11, 9, 8, 7, 6, 5, 4, 3, 2, 1, 


69 




14, 15, 12, 13, 11, 10, 9, 8, 7, 6, 5, 4, 2, 3, 1, 


58 


:fi2 


14, 15, 13, 12, 11, 10, 8, 9, 7, 6, 4, 5, 2, 3, 1, 


35 




14, 15, 13, 12, 11, 10, 8, 9, 7, 6, 4, 5, 3, 2, 1, 


56 


-7-'l4 


14, 15, 13, 12, 11, 10, 8, 9, 7, 6, 5, 4, 3, 2, 1, 


94 




14, 15, 13, 12, 11, 10, 9, 8, 7, 6, 5, 4, 3, 2, 0, 1 


86 




14, 15, 13, 12, 11, 10, 9, 8, 7, 6, 5, 4, 3, 2, 1, 
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(a) Interaction (b) Double Stochastic Functions 

Graph 



Fig. 2: Chaotic Functions Candidates with n — A 



the kcystream is accepted as random with a confidence of 99%. Synthetic rcsuhs 
in Table. [T] show that ah these functions successfuUy pass this statistical battery 
of tests. 



Property 




^2 






.^5 






.^8 




.7^10 


Til 


.7^12 


^13 


J^14 


.7^15 




Frequency 


77.9 


15.4 


83.4 


59.6 


16.3 


38.4 


20.2 


29.0 


77.9 


21.3 


65.8 


85.1 


51.4 


35.0 


77.9 


92.4 


BlockFrequency 


88.3 


36.7 


43.7 


81.7 


79.8 


5.9 


19.2 


2.7 


98.8 


1.0 


21.3 


63.7 


1.4 


7.6 


99.1 


33.5 


C u mu 1 at i ve S u ms 


76.4 


86.6 


8.7 


66.7 


2.2 


52.6 


20.8 


80.4 


9.8 


54.0 


73.6 


80.1 


60.7 


79.7 


76.0 


44.7 


Runs 


5.2 


41.9 


59.6 


89.8 


23.7 


76.0 


77.9 


79.8 


45.6 


59.6 


89.8 


2.4 


96.4 


10.9 


72.0 


11.5 


LongestRun 


21.3 


93.6 


69.9 


23.7 


33.5 


30.4 


41.9 


43.7 


30.4 


17.2 


41.9 


51.4 


59.6 


65.8 


11.5 


61.6 


Rank 


1.0 


41.9 


35.0 


45.6 


51.4 


20.2 


31.9 


83.4 


89.8 


38.4 


61.6 


4.0 


21.3 


69.9 


47.5 


95.6 


FFT 


40.1 


92.4 


97.8 


86.8 


43.7 


38.4 


76.0 


57.5 


36.7 


35.0 


55.4 


57.5 


86.8 


76.0 


31.9 


7.6 


NonOverlappingTcmplatc 


49.0 


45.7 


50.5 


51.0 


48.8 


51.2 


51.6 


50.9 


50.9 


48.8 


45.5 


47.3 


47.0 


49.2 


48.6 


46.4 


OverlappingTemplate 


27.6 


10.9 


53.4 


61.6 


16.3 


2.7 


59.6 


94.6 


88.3 


55.4 


76.0 


23.7 


47.5 


91.1 


65.8 


81.7 


Universal 


24.9 


35.0 


72.0 


51.4 


20.2 


74.0 


40.1 


23.7 


9.1 


72.0 


4.9 


13.7 


14.5 


1.8 


93.6 


65.8 


ApproxiniatcEntropy 


33.5 


57.5 


65.8 


53.4 


26.2 


98.3 


53.4 


63.7 


38.4 


6.7 


53.4 


19.2 


20.2 


27.6 


67.9 


88.3 


RandomExcursions 


29.8 


35.7 


40.9 


36.3 


54.8 


50.8 


43.5 


46.0 


39.1 


40.8 


29.6 


42.0 


34.8 


33.8 


63.0 


46.3 


RandomExcursions Variant 


32.2 


40.2 


23.0 


39.6 


47.5 


37.2 


56.9 


54.6 


53.3 


31.5 


23.0 


38.1 


52.3 


57.1 


47.7 


40.8 


Serial 


56.9 


58.5 


70.4 


73.2 


31.3 


45.9 


60.8 


39.9 


57.7 


21.2 


6.4 


15.6 


44.7 


31.4 


71.7 


49.1 


Linear Complexity 


24.9 


23.7 


96.4 


61.6 


83.4 


49.4 


49.4 


18.2 


3.5 


76.0 


24.9 


97.2 


38.4 


38.4 


1.1 


8.6 



Table 1: NIST Test Evaluation of PRNG instances 



6 Conclusion and Future Work 

This work has shown that discrete-time dynamical systems Gf are chaotic iff 
embedded Boolean maps / have strongly connected iteration graph r[f). Suffi- 
cient conditions on its interaction graph G{f) have been further proven to ensure 



this strong connexity. Finally, we have proven that the output of such a function 
is uniformly distributed iff the induced Markov chain can be represented as a 
double stochastic matrix. We have applied such a complete theoretical work on 
chaos to pseudo random number generation and all experiments have confirmed 
theoretical results. As far as we know, this work is the first one that allows to 
compute new functions whose chaoticity is proven and preserved during imple- 
mentation. The approach relevance has been shown on PRNGs but is not limited 
to that domain. In fact, this whole work has applications everywhere chaoticity 
is a possible answer, e.g., in hash functions, digital watermarking. . . 

In a future work, we will investigate whether the characterization of uniform 
distribution may be expressed in terms of interaction graph, avoiding thus to 
generate functions and to check later whether they induce double stochastic 
Markov matrix. The impact of the description of chaotic iterations as Markov 
processes will be studied more largely. We will look for new characterizations 
concerning other relevant topological properties of disorder, such as topological 
entropy, expansivity, Lyapunov exponent, instability, etc. Finally, the relation 
between these mathematical definitions and intended properties for each targeted 
application will be investigated too, specifically in the security field. 



